Fortinet Exam FCSS_ADA_AR-6.7 Topic 3 Question 3 Discussion

Actual exam question for Fortinet's FCSS_ADA_AR-6.7 exam

Question #: 3
Topic #: 3

[All FCSS_ADA_AR-6.7 Questions]

Refer to the exhibit.

An administrator wants to remediate the incident from FortiSIEM shown in the exhibit.

What option is available to the administrator?

AQuarantine IP FortiClient

BRun the block domain Windows DNS

CRun the block MAC FortiOS

DRun the block IP FortiOS 5.4
The incident shown in the exhibit indicates that a firewall detected malware but could not remediate it. The firewall identified the EICAR_TEST_FILE virus and logged the source IP (10.0.3.10) as the origin of the threat.
To remediate this, the administrator should take action at the network level, specifically using FortiOS to block the source IP address. The option 'Run the block IP FortiOS 5.4' provides the ability to block traffic from the infected IP at the firewall level, effectively preventing further threats from that source.

Show Suggested Answer

Suggested Answer: D

by Shawna at Apr 03, 2025, 08:47 AM

Limited Time Offer

25%

Off

Get Premium FCSS_ADA_AR-6.7 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kristel

22 days ago

I'm surprised the firewall couldn't take care of this on its own. Option D is the clear solution to get this under control.

upvoted 0 times

...

Alyssa

23 days ago

Ha! I bet the admin is cursing that EICAR_TEST_FILE right about now. Option D is the obvious choice, block that IP and stop the madness!

upvoted 0 times

Sharen

3 days ago

User 1: Yeah, that EICAR_TEST_FILE is causing some trouble.

upvoted 0 times

...

2 months ago

I think the answer is D) Run the block IP FortiOS 5.4 because it allows the administrator to block the infected IP at the firewall level.

upvoted 0 times

...